diff --git a/modules/users/overseer/acme.nix b/modules/users/overseer/acme.nix
index 998fd94..4176a59 100644
--- a/modules/users/overseer/acme.nix
+++ b/modules/users/overseer/acme.nix
@@ -45,6 +45,7 @@ lib.mkIf config.user.overseer.enable {
       "openhab.wanderingcrow.net" = {};
       "frigate.wanderingcrow.net" = {};
       "notes.wanderingcrow.net" = {};
+      "grocy.wanderingcrow.net" = {};
     };
   };
 }
diff --git a/modules/users/overseer/services/default.nix b/modules/users/overseer/services/default.nix
index 300eb25..61acb3e 100644
--- a/modules/users/overseer/services/default.nix
+++ b/modules/users/overseer/services/default.nix
@@ -9,5 +9,6 @@
     ./openhab.nix
     ./frigate.nix
     ./trilium.nix
+    ./grocy.nix
   ];
 }
diff --git a/modules/users/overseer/services/grocy.nix b/modules/users/overseer/services/grocy.nix
new file mode 100644
index 0000000..5f416ac
--- /dev/null
+++ b/modules/users/overseer/services/grocy.nix
@@ -0,0 +1,17 @@
+{
+  lib,
+  config,
+  ...
+}:
+lib.mkIf config.user.overseer.enable {
+  services.nginx.virtualHosts."grocy.wanderingcrow.net" = {
+    forceSSL = true;
+    useACMEHost = "grocy.wanderingcrow.net";
+  };
+
+  services.grocy = {
+    enable = true;
+    hostName = "grocy.wanderingcrow.net";
+    nginx.enableSSL = false;
+  };
+}